Possible Out-of-Bounds Read Vulnerability in Unknown Context
CVE-2024-20136

Currently unrated

Key Information:

Vendor

MediaTek
Status
Mt2737, Mt6781, Mt6789, Mt6855, Mt6878, Mt6879, Mt6880, Mt6886, Mt6890, Mt6895, Mt6897, Mt6980, Mt6983, Mt6985, Mt6989, Mt6990, Mt8195, Mt8370, Mt8390, Mt8673, Mt8676, Mt8678, Mt8755, Mt8775, Mt8781, Mt8795t, Mt8796, Mt8798, Mt8893
Vendor
CVE Published:
2 December 2024

What is CVE-2024-20136?

In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09121847; Issue ID: MSV-1821.

Affected Version(s)

MT2737, MT6781, MT6789, MT6855, MT6878, MT6879, MT6880, MT6886, MT6890, MT6895, MT6897, MT6980, MT6983, MT6985, MT6989, MT6990, MT8195, MT8370, MT8390, MT8673, MT8676, MT8678, MT8755, MT8775, MT8781, MT8795T, MT8796, MT8798, MT8893 Android 12.0, 13.0, 14.0, 15.0 / openWRT 19.07, 21.02, 23.05 / Yocto 4.0 / RDK-B 22Q3, 24Q1

References

https://corp.mediatek.com/product-security-bulletin/Decem...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.